Hack In The Box Security Conference Courses

Breaking MPC Wallets and Digital Custodians - HITB2023HKT

Unveiling TSSHOCK: New key extraction attacks on Multi-Party Computation wallets and digital asset custody solutions, demonstrating vulnerabilities in widely-used Threshold Signature Schemes.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Locating Vulnerabilities in Ethereum Smart Contracts - Hybrid Analysis Method

Explore a hybrid analysis method combining smart contract decompilation and EVM simulation to identify vulnerabilities in Ethereum projects, with practical demonstrations and insights.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Breaking ML Services: Finding Zero-Days in Azure Machine Learning

Uncover critical vulnerabilities in Azure Machine Learning, including credential leaks, information disclosure, and persistence techniques. Learn assessment methods for cloud-based MLaaS platforms and shared responsibility models.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Free Video

KeyBleed: Attacking the OneKey Mini Cryptocurrency Wallet - Hack In The Box 2023

Revealing vulnerabilities in cryptocurrency hardware wallets, focusing on the OneKey Mini's security flaws. Demonstrates live exploit to extract and crack the seed, recovering stored funds in under one second.

• YouTube
• 57 minutes
• On-Demand
• Free Video

CTF Prize Giving & Closing Note

Prize giving ceremony and closing remarks for the HITB2023AMS Capture The Flag competition, highlighting achievements and concluding the event.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

The Hand That Strikes, Also Blocks

Exploring the interplay between cybersecurity attacks and defenses, this talk examines evolving strategies, stakeholder mindsets, and proactive approaches for a more secure digital future.

• YouTube
• 38 minutes
• On-Demand
• Conference Talk

Investigating Web3 With OSINT

Explore Web3 fundamentals, including blockchain transactions, technology stack, token standards, and security risks, using OSINT techniques and free online tools.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

An Analysis of Computer Numerical Control Machines in Industry 4.0

Explores security risks in modern CNC machines, demonstrating practical attacks and discussing mitigation strategies for Industry 4.0 vulnerabilities in manufacturing environments.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Privilege Escalation Using DOP in MacOS

Explore privilege escalation in MacOS using Data-Oriented Programming (DOP), a powerful exploit technique that leverages heap buffer overflow vulnerabilities for persistent attacks resistant to kernel code changes.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

A Deep Dive Into GarminOS And Its MonkeyC Virtual Machine

Explore GarminOS and MonkeyC VM, uncovering critical vulnerabilities in Garmin devices. Learn about reverse engineering, virtual machine internals, and exploiting low-level security flaws in smart fitness technology.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Active Directory Abuse Primitives and Operation Security

Comprehensive exploration of Active Directory attack techniques, demonstrating real-world abuse primitives and attack paths. Includes practical demonstrations and operational guidance for both offensive and defensive perspectives.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Smart Speaker Shenanigans - Making the SONOS One Sing

Exploring ARM Trusted Firmware, secure boot, and encryption vulnerabilities in smart devices. Demonstrates exploits on Lenovo clock and SONOS One, revealing secrets and breaking security boundaries.

• YouTube
• 52 minutes
• On-Demand
• Conference Talk

Exploiting IPC With New Desynchronization Primitives

Exploración de vulnerabilidades críticas en SAP, demostrando técnicas avanzadas de explotación HTTP y desincronización para comprometer sistemas empresariales. Incluye demostraciones prácticas y análisis de impacto en la seguridad global.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

ChatGPT Please Write Me A Piece of Polymorphic Malware

Explore how ChatGPT can be used to create advanced polymorphic malware, discussing the challenges, implementation techniques, and potential threats posed by AI-generated malicious software.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Automated Black-box Security Testing of Smart Embedded Devices

Innovative approach for IoT black-box fuzzing using "fuzzing triggers" from companion apps to generate optimal inputs, overcoming limitations of existing tools and discovering zero-day vulnerabilities.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk